CVE-2014-4808: Medium severity ibm websphere portal vulnerability

Published Oct 28, 2014

Updated

Unspecified vulnerability in IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, 8.0 through 8.0.0.1 CF14, and 8.5.0 before CF03 allows remote authenticated users to execute arbitrary code via unknown vectors.

Affected Software

16 affected components

IBM WebSphere Portal=6.1.0.0

IBM WebSphere Portal=6.1.0.1

IBM WebSphere Portal=6.1.0.2

IBM WebSphere Portal=6.1.0.3

IBM WebSphere Portal=6.1.0.4

IBM WebSphere Portal=6.1.0.5

IBM WebSphere Portal=6.1.0.6

IBM WebSphere Portal=6.1.5.0

IBM WebSphere Portal=6.1.5.1

IBM WebSphere Portal=6.1.5.2

IBM WebSphere Portal=6.1.5.3

IBM WebSphere Portal=7.0.0.0

IBM WebSphere Portal=7.0.0.1

IBM WebSphere Portal=7.0.0.2

IBM WebSphere Portal=8.0.0.0

IBM WebSphere Portal=8.0.0.1

Remediation

Patch Available

http://www-01.ibm.com/support/docview.wss?uid=swg21684651

Event History

Oct 28, 2014

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2014-4808?

CVE-2014-4808 is considered a high-severity vulnerability that allows remote authenticated users to execute arbitrary code.

How do I fix CVE-2014-4808?

To fix CVE-2014-4808, upgrade your IBM WebSphere Portal to the latest available version or apply the recommended patches.

Which versions of IBM WebSphere Portal are affected by CVE-2014-4808?

CVE-2014-4808 affects IBM WebSphere Portal versions 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF28, 8.0 through 8.0.0.1 CF14, and 8.5.0 before CF03.

Who is impacted by CVE-2014-4808?

Remote authenticated users of affected IBM WebSphere Portal versions are impacted by CVE-2014-4808.

What type of vulnerability is CVE-2014-4808?

CVE-2014-4808 is an unspecified vulnerability that allows unauthorized execution of arbitrary code.